CVE-2014-0792 | BDVDB-2026-59468 Detail

Description#

Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.sonatype.org/advisories/archive/2014-01-13-Nexus
https://support.sonatype.com/entries/37828023-Nexus-Security-Vulnerability
https://sonatype.zendesk.com/entries/37551958-Configuring-Xstream-Whitelist

Exploit#

No public exploit known

History#

Version 12014-01-17Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.